CA Antivirus Software exposes severe security vulnerabilities that can cause system crashes

According to foreign media reports, the security software vendor CA recently reminded users that multiple anti-virus software has security vulnerabilities and can be exploited by hackers to execute malicious code on users' computers.

CA recently said that its anti-virus software engine has a buffer overflow vulnerability. Hackers can exploit this vulnerability by sending CAB files with long file names.

If the vulnerability is successfully exploited, hackers are allowed to execute malicious code on the user's computer with system-level permissions.

Or at least launch a Denial-of-Service attack, which eventually causes the system to crash.

It is reported that all versions of the Antivirus engine earlier than 30.6 are affected by this vulnerability. Major products include CA Antivirus for the Enterprise (r8 and r8.1) and CA Antivirus 2007 (v8), CA Internet Security Suite 2007 (v3), CA Secure Content Manager 8.0, CA Anti-Virus Gateway 7.1, and BrightStor ARCserve Backup (r11.1 ).

CA classifies the security vulnerability as a "high" risk, that is, the most serious risk level. Symantec also regards it as the top 10 of the 10 dangerous levels ". A few days ago, CA has released corresponding patches.